Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: iW5aFUC8hvbLUuv+zgPEYkJlqk/A+pyf/eufMJ9JX5U=
Subject key identifier: AF:33:C0:78:E1:BF:9B:62:10:FA:E2:FB:2D:69:A8:CF:F7:CE:B6:2B
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 019683C7E1B8650B9F5BDC40820863718767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 1122
Signing time: Tue 29 Apr 2025 23:00:36 +0000
Manifest this update: Tue 29 Apr 2025 23:00:36 +0000
Manifest next update: Wed 30 Apr 2025 23:00:36 +0000
Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: d9LoJ30F4QZ9kaIQRjxCaWFChuMF4H4LD19iSv/jSq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:e1:b8:65:0b:9f:5b:dc:40:82:08:63:71:87:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Apr 29 23:00:36 2025 GMT
Not After : Apr 30 23:00:36 2025 GMT
Subject: CN=af33c078e1bf9b6210fae2fb2d69a8cff7ceb62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:84:7c:0b:47:62:71:54:77:1d:2d:2d:0f:
ba:04:b9:33:82:26:81:c6:51:4d:2d:e7:bd:7f:95:
41:a7:22:3d:1f:43:e9:54:3d:8a:dc:0a:0c:3e:76:
05:a0:5c:6a:de:a3:ab:b1:75:90:22:76:38:15:35:
7a:05:33:ef:2f:42:5c:62:1d:95:a5:d7:a0:0a:33:
49:55:2d:b3:ad:e5:90:aa:84:1f:fe:c6:67:11:b8:
59:fb:7a:3e:23:7c:58:51:c2:16:9c:82:e0:7d:63:
86:2f:ff:b0:de:5e:bc:fb:ed:a1:ae:66:86:bd:5a:
89:69:63:a7:56:be:f6:f1:dd:58:f4:c0:26:8f:bf:
f1:f8:61:e8:cf:bb:36:55:b7:74:4e:13:cd:e1:11:
19:2a:d9:1a:01:04:17:e2:bd:ae:fc:e4:c3:cd:f6:
a3:bc:3e:47:13:5d:63:0a:13:e8:c4:7e:04:d3:e1:
0f:dd:42:d1:74:b0:03:e3:cf:d3:4e:55:06:43:14:
bd:fb:ed:4b:ef:fd:a9:fb:b5:f2:6d:40:38:94:58:
55:b0:f9:24:bd:01:5e:82:3b:bd:da:0c:e2:d8:ce:
fb:91:9b:09:49:57:40:ab:da:aa:10:58:4b:60:61:
21:42:5d:3d:d4:00:ae:16:84:11:60:db:61:50:80:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:33:C0:78:E1:BF:9B:62:10:FA:E2:FB:2D:69:A8:CF:F7:CE:B6:2B
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:da:90:08:46:19:ca:5d:2e:f7:89:37:bf:be:27:8c:fb:a4:
04:99:bc:d6:35:ce:1d:26:c1:b9:57:e1:02:15:b1:2b:b7:64:
f2:9c:56:b5:a5:f4:18:b7:03:dd:ee:df:ee:4b:e6:fa:64:0d:
b9:c9:b0:29:08:9a:2c:8d:00:79:12:78:07:0b:3c:06:e7:57:
c9:a8:bd:33:0a:d3:9c:0f:76:af:a3:09:35:6b:a9:c2:f2:37:
1f:10:b2:ad:56:62:d9:18:09:cb:d2:ec:e2:e0:49:e7:3b:f4:
b5:cd:7b:c7:e4:22:e5:02:56:03:f2:6b:e1:8e:98:6c:d8:3e:
06:b7:76:5d:77:66:cc:19:73:f0:fd:4a:cf:65:ee:11:d1:29:
80:b5:65:3f:c8:79:ce:47:20:5d:e2:40:57:26:a6:0d:90:ca:
2a:07:c0:d8:e5:09:08:f4:a3:0f:dd:59:ea:56:61:7a:35:1e:
c6:37:67:ca:d1:be:3b:64:fa:18:23:e0:f4:48:4e:73:37:c4:
36:2a:f3:fe:ca:14:80:b8:d8:6e:a1:52:5a:61:06:13:66:64:
87:d3:1c:05:51:8b:86:0d:6b:c5:e6:7e:ea:d3:8e:55:ad:6e:
e1:c7:21:4f:19:e2:18:b4:6f:60:e2:60:7b:38:47:97:68:0c:
90:af:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:10:42 2025 by rpki-client